Vulnerabilidades em themelooks
14 resultadosAnálise Vexday
A Themelooks apresenta 12 vulnerabilidades catalogadas, com 1 crítica e nenhuma sob ataque ativo no momento. A fraqueza dominante é injeção de script entre sites (CWE-79), padrão em componentes web, com apenas 1 disclosure recente nos últimos 90 dias, sugerindo risco contido e não em progressão acelerada.
CVE-2024-9307CRITICALmFolio Lite <= 1.2.1 - Missing Authorization to Authenticated (Author+) File Upload via EXE and SVG FilesEPSS 1.0%CVE-2024-10868MEDIUMEnter Addons – Ultimate Template Builder for Elementor <= 2.1.9 - Authenticated (Contributor+) Post DisclosureEPSS 0.4%CVE-2024-3831MEDIUMEnter Addons – Ultimate Template Builder for Elementor <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading widgetEPSS 0.4%CVE-2024-3680MEDIUMEnter Addons – Ultimate Template Builder for Elementor <= 2.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animation Title widget img tagEPSS 0.4%CVE-2025-31847MEDIUMWordPress mFolio Lite plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-56252MEDIUMWordPress Enter Addons plugin <= 2.1.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-11802MEDIUMFoodBook Lite <= 1.5.6 - Missing Authorization to Unauthenticated User Registration via 'registration_action' AJAX ActionEPSS 0.3%CVE-2024-7611MEDIUMEnter Addons – Ultimate Template Builder for Elementor <= 2.1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Events Card WidgetEPSS 0.3%CVE-2025-60125MEDIUMWordPress FoodBook Plugin <= 4.7.6 - Sensitive Data Exposure VulnerabilityEPSS 0.3%CVE-2024-37263MEDIUMWordPress Enter Addons – Ultimate Template Builder for Elementor plugin <= 2.1.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-43225MEDIUMWordPress Enter Addons plugin <= 2.1.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-47625MEDIUMWordPress Enter Addons – Ultimate Template Builder for Elementor plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-8687MEDIUMEnter Addons <= 2.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown and Image Comparison WidgetsEPSS 0.2%CVE-2026-25014MEDIUMWordPress Enter Addons plugin <= 2.3.2 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%